Rails Conf 2013 Rails' Insecure Defaults by Bryan Helmkamp

1,706 views · Published 19 May 2013 · 30:36 · Indexed 26 October 2026

Channel: Confreaks · 2013 · Science & Technology

Watch on YouTube

Out of the box, Rails provides facilities for preventing attacks like SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), and more. As a result, it's considered one of the most secure web application frameworks available.
Digging deeper, however, you can find a number of places where Rails' default behavior is not as secure as it could be. This talk will focus on longstanding, known weak spots that create risks for your application and business if you are not aware of them.

Help us caption & translate this video!

http://amara.org/v/FGap/

More from this channel